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I. INTRODUCTION 



Methods to protect fragile quantum superpositions arc of paramount importance in the quest to construct devices 
that can reliably process quantum information [0J^]. Compared to their classical counterparts such devices feature 
spectacular advantages in both computation and communication, as discussed in a number of recent reviews |5]-^j. 
The dominant source of the fragility of a quantum information processor (QIP) is the inevitable interaction with its 
environment. This coupling leads to decoherence: a process whereby coherence of the QlP-wavefunction is gradually 
destroyed. Formally, the evolution of an open system (coupled to an environment) such as a QIP can be described 
by a completely-positive map j^] , which can always be written in the explicit form known as the Kraus operator sum 
• representation Q: 



I d 
> ' 

Here p is the system density matrix, and the "Kraus operators" {Ad} are time-dependent operators acting on the 
system Hilbert space, constrained only to sum to the identity operator: J2d ^li^d = I (to preserve Tr[p]).Q Decoher- 
O^ 1 ence is the situation where there are at least two Kraus operators that are inequivalent under scalar multiplication. 
The Kraus operators are in that case related to the different ways in which errors can afflict the quantum information 
contained in p 0. Conversely, if there is only one Kraus operator, then from the normalization condition it must be 
unitary: A — exp(—iHt) with H Hermitian, so that p satisfies the clos erf-system Liouville equation p = — i[H, p], H 
being the system Hamiltonian. In this case there is no decoherence. 

Two principal encodin g m ethods have been proposed to solve the decoherence problem: (i) Quantum Error Cor- 
recting Codes (QECCs) |10|-[l^] (for a recent review see @), (ii) Decoherence- Free Subspaces (DFSs) , also 
known as "noiseless" , or "error-avoiding quantum codes" . In both methods quantum information is protected against 
decoherence by encoding it into "codewords" (entangled superpositions of multiple-qubit states) with special symme- 
try properties. To exhibit these, it is useful to expand the Kraus operators over a fixed operator basis. For qubits 
a particularly useful basis is formed by the elements of the Pauli group: the group of tensor products of all Pauli 
matrices {<?%*}, where a — 0,x,y, z (cr° is the 2x2 identity matrix) and k = 1..K is the qubit index. An element 
of the Pauli group can be written as E a — ®k=i a k k ^ wnere a — ( a i, ■■■,&k)- The elements {E a } of the Pauli 



1 As shown, e.g., in ||, the operator sum representation can be derived from a Hamiltonian model by considering the reduced 
dynamics of a system coupled to a bath B: p(t) = TiB{U(t)(p(0) ® pb(0))LP (t)]. Here the trace is over the bath degrees 
of freedom, U = exp(-iHsBt) is the unitary evolution operator of the combined system-bath, and Hsb is their interaction 
Hamiltonian. One finds: -A<j=(iu,i/) = ^/Jl{p\U\v) , where \p), \v) are bath states in the spectral decomposition of the bath density 
matrix: ps = X) 



1 



group (we include factors of ±,±t in this count) square to identity, are both unitary and Hermitian, either commute 
or anti-commute, and satisfy Tr[E a E b ] = 5 ab /2 K . When the Kraus operators are expanded as 

A d (t) = Y, c *d(t)E ai (1.2) 

the operators {E a } acquire the significance of representing the different physical errors that can corrupt the quantum 
information. The weight w(E a ) is the number of non-zero ctk in a. Let us now assume a short-time expansion of the 
c ad(t) (relative to the bath-correlation time). The situation where only those E a with w(E a ) = 1 have non- vanishing 
c a d{t) is called the "independent errors" model (assuming the c a d, which are essentially bath correlation functions 
||, are statistically independent). Correlated errors corresponds to the situation where some E a with w(E a ) > 1 
have non- vanishing c a d(t): two or more qubits are acted upon non-trivially with the same coefficient c a( i- QECCs can 
be classified according to the maximum weight of the errors they can still correct (this is related to the notion of a 
"distance" of a code fll7fl ). QECCs can generally deal at least with errors of weight 1. Barring accidental degeneracies, 
non-trivial DFSs, on the other hand, generally do not exist if there are errors with weight 1 To make these ideas 
more precise, let us briefly recall the definitions of QECCs and DFSs. 

A QECC is a subspace C = Span[{|i)}] of the system Hilbert space with the symmetry property that different errors 
take orthogonal codewords \i) and \j) to orthogonal states fl6|| : 

(i\E a E b \j)= lab 6 i:i . (1.3) 

Here ^ ab are the elements of an Hermitian matrix 7 and 5y is the Kronecker delta. This property ensures that if an 
error E a occurs it can be detected and subsequently reversed . A large variety of QECCs have been found [jl7| . 
A particularly useful and large class, one which will occupy our attention in this paper, arises when one considers 
Abelian subgroups Q of the Pauli group. Given such an Abelian Pauli-subgroup, or stabilizer Q (we will use both 
terms interchangeably in this paper), its +1 eigenspace is a QECC known as a stabilizer code The set of errors 
{Ea} is correctable by this code if for every two errors E a , E b there exists some q G Q such that 

{ElE b ,q} = 0. (1.4) 



This is because under the stipulated condition (i\E^E b \j) — (i\E a E b q\j) — —(i\qElE b \j) — — {i\E a E b \j) so that 
(i\E\E b \j) cc Sij p5| : the QECC condition [Eq. (1.3)] is satisfied. To correct an error E a one simply applies the 
unitary operator E\to the code. Note that this involves active intervention: measurements to diagnose the error, and 
error reversal. 

DFSs can be viewed as highly "degenerate" QECCs, where degeneracy refers to the rank of 7: DFSs are rank-1 
QECCs (i.e., ~f ab = 7a7 t>) ]p3| ,p5[. Equivalently, a DFS can be defined as the simultaneous eigenspace H — Span[{|j)}] 
of all Kraus operators p3 |: 

A d \j)=a d \j) (1.5) 

({a^} are the eigenvalues). Viewed in this way, DFSs have the remarkable property that they offer complete protection 
for quantum information without the need for any active intervention: p{t) = ^2 d Ad(t)p(0)A d (t) = p(0) ~^2 d \ad\ 2 = 
/5(0), for p with support exclusively on TL. Thus a DFS is a "quiet corner" of the system Hilbert space, which is 
completely immune to decoherence. Like stabilizer-QECCs, DFSs can also be characterized as the +1 eigenspace of a 
stabilizer, which however is generally non- Abelian over the Pauli group [2^j27|| (i.e., a DFS is generally a non-additive 
code ^8|). Most work on DFSs to date has focused on a model of highly correlated errors, known as "collective 
decoherence". In this model the (non- Abelian) stabilizer is composed of tensor products of identical SU(2) rotations 
+ contractions on all qubits. Here we will not concern ourselves with the collective decoherence model, and the term 
stabilizer will be reserved for the Abelian subgroups of the Pauli group. 

In a companion paper [^9) (referred to from here on as "paper 1" ) we began a study of DFSs for non-collective 
errors. We derived a necessary and sufficient condition for a subspace to be decoherence-free when the Kraus operators 
are expanded as linear combinations over the elements of an arbitrary group. The decoherence-free states were shown 
to be those states that transform according to the one-dimensional irreducible representations (irreps) of this group. 
As above, it is natural to focus on the case where this group is the Pauli group. This is so not only because of the 
connection to stabilizer-QECCs, but also because the Pauli group arises in the context of many-qubit systems, where 
it is often natural to expand the Hamiltonians in terms of tensor products of Pauli matrices. To find DFSs, therefore, 
we focus here on subgroups of the Pauli group. Note that the non- Abelian subgroups of the Pauli group do not have 
one-dimensional irreps |p9f , and hence in this case a DFS can be associated only with the Abelian subgroups (which 
of course have only one-dimensional irreducible representations). 
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We can now define the error model that will concern us in this paper. Unlike the stabilizer-QECCs case, where 
the errors that the code can correct are those that anti-commute with the stabilizer, in the DFS case the errors are 
the elements of the stabilizer itself. We shall refer to these errors as "stabilizer-errors" . The Abelian subgroups of 
the Pauli group cannot contain single-qubit operators, since these would generally generate the whole Pauli group.^j 
Hence as errors the elements of the subgroup represent multiple- qubit couplings to the bath. As explained above, this 
is therefore a correlated-errors model, which is distinguished from previous work on DFSs in that it does not involve 
any spatial-symmetry assumptions. The physical relevance of this error- model was discussed in paper 1, and will be 
embellished here. The DFS is not affected by these stabilizer-errors, but the rest of the Hilbert space is and may 
decohere under their influence. Several examples of DFSs corresponding to Abelian subgroups were given in paper 1. 
Our purpose in this sequel paper is to complete our study of this class of DFSs by showing how to perform universal 
fault-tolerant quantum computation on them. 

The central challenge in demonstrating universal fault-tolerant quantum computation on DFSs is to show how 
this can be done using only 1- and 2-body Hamiltonians, and a small number of measurements.^ Several previous 
pub lications have addressed the issue of universal quantum computation on DFSs, but left this cha lenge unanswered 
jp2| , j30|]3~L) . In Refs. [^,^7j we accomplished this task for the first time, in the collective decoherence model. Collective 
decoherence is the situation where all qubits are coupled in an identical manner to the bath, i.e., there is a strong 
spatial symmetry: qubit permutation-invariance. In this case, by using exchange operations, it is possible to implement 
universal quantum computation without ever leaving the DFS. The procedure is therefore naturally fault-tolerant. In 
the present paper we will show how to implement universal fault-tolerant quantum computation on DFSs that arise 
from the Pauli subgroup error model, without requiring any spatial symmetry assumption. However, it will not be 
possible to do so without leaving the DFS, thus exposing the states to the subgroup errors. As will be shown here, 
fault-tolerance is obtained by using the encoded states twice: in a dual DFS-QECC mode. This duality arises from 
the fact that the DFS remains a perfectly valid QECC for the errors that the stabilizer anticommutes with. 

There are several ways to achieve universal fault-tolerant quantum computation on stabilizer-QECCs; e.g., use of 
the sets of gates {Hadamard, crl^ 2 , Toffoli} |3^,|lJ], or {Hadamard, er^ 4 , controlled-NOT} [[33). Additional methods 



were provided in [|34|35|. Our construction reverts to the early ideas on the implementation of universal quantum 
computing: we use single-qubit SU(2) operations and a controlled-NOT gate po -|39|| , except that these are encoded 
operations, acting on codewords (not on physical qubits). In general such encoded operations involve multiple qubits, 
and are not naturally available. The key to our construction is a method to generate many-qubit Hamiltonians by 
composing operations on (at most) pairs of physical qubits. This is done by selectively turning certain interactions 
on and off. A difficulty is that the very first such step can transform the encoded states and take them outside of the 
DFS. However, by carefully choosing the interactions we turn on/off and their order, we show that the transformed 
states become a QECC with respect to the stabilizer-errors that the DFS was immune to. This fact is responsible for 
the fault-tolerance of our procedure. After the final interaction is turned off, the states return to the DFS, and are 
once again immune to the stabilizer-errors. 

The structure of the paper is as follows. In Section || we briefly review the main result of paper 1, and the 
connection between the DFSs considered here and stabilizer-QECCs. We then discuss in Section [II the meaning of 
fault-tolerance in light of the error-model considered in this paper. In the following two sections we present the main 
new ideas and results of this paper: i n pj\ we show how to generate many-qubit Hamiltonians by composing two- 
and single-qubit Hamiltonians, and in M prove the fault-tolerance of this procedure. We use it to generate encoded 
SU(2) operations on the DFS qubits. Section [v| shows how, by using similar methods, we can fault-tolerantly 
perform encoded CNOT operations on the encoded qubits, thus coupling blocks of qubits an d co mpleting the set 
of operations needed for universal computation. The final ingredient is presented in Section VII, where we show 
how to fault-tolerantly measure the error syndrome throughout our gate construction. While our main motivation in 
this paper is to study computation on DFSs in the presence of stabilizer-errors, it is also interesting to consider the 
implications of the techniques we develo p her e to the usual model of errors that anticommute with the stabilizer. We 
consider this question briefly in Section |VIII , and show that our methods provide a new way to implement universal 
quantum computation which is fault tolerant with respect to error detection. We conclude and summarize in section 

fx. 



2 The exceptions are: (i) The subgroup operators have constant a — x, y or z - the Pauli matrix index; (ii) The single-qubit 
operators act only on those qubits where all other operators act as identity. 

3 By "small" we mean that the measurements do not have to be fast compared to the bath correlation time. If they are then 
the decoherence is avoided essentially by use of the quantum Zeno effect. 
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II. CONNECTION BETWEEN PAULI SUBGROUP DFSs AND STABILIZER CODES 



In paper 1 we proved the following result: 

Theorem 1. — Suppose that the Kraus operators belong to the group algebra of some group Q = {G„}, i.e., 
A d = ^2 n= iO-d,nG n . If a set of states {|j)} belong to a given one- dimensional irrep of Q 1 then the DFS condition 
Adlj) = Cd\j) holds. If no assumptions are made on the bath coefficients {ad.n}, then the DFS condition A^Ij) = Cd\j) 
implies that \j) belongs to a one- dimensional irrep of Q. 

This theorem provides a characterization of DFSs in terms of the group-representation properties of the basis set 
used to expand the Kraus operators in. There are good physical reasons to choose the Pauli group as this basis set: 
as argued in paper 1, the Pauli group naturally appears as a basis in Hamiltonians involving qubits. Furthermore, 
using the Pauli group allows us to make a connection to the theory of stabilizer-QECCs. To see this consider the 
identity irrep, for which each element G n in the group Q acts on a decoherence free state \ip) as 

G n \rjj) = |</>). (2.1) 

Choosing Q from now on as a Pauli subgroup Q, the DFS fixed by the identity irrep is a stabilizer code, where Q is 
the stabilizer group. As mentioned above, a stabilizer code is defined as the +1 eigenspace of the Abelian group 
It is thus clear that the states fixed by Q play a dual role: they are at once a DFS with respect to the stabilizer errors 
and a QECC with respect to the errors that anticommute with some element ofQ. 
It is simple to verify that basic properties of stabilizer codes hold, e.g., that if the stabilizer grou p h as K — I 



generators, then the code space (in this case the DFS) has dimension 2 l (i.e., there are I encoded qubits) |15|. Indeed, 
the dimension of an Abelian group with K — I generators is N = 2 K ~ l , and we showed in paper 1 that the dimension 
of the DFS is 2 K /N = 2 l . 



III. THE MEANING OF FAULT-TOLERANCE 



The observation that the Pauli subgroup DFSs are stabilizer codes allows us to employ some results from stabilizer 
theory, and aids in the analysis of when it is possible to perform universal fault-tolerant computation on these DFSs.0 
Before delving into the analysis, however, we should clarify what we mean by fault-tolerance in the present context. 
The usual meaning of fault-tolerance, as it is used in the theory of QECC, is the following: an operation (gate U) is 
not fault-tolerant if an error E that the code could fix before application of the gate has become an unfixable error 
(UEU^) after application of the gate. For example, a single qubit phase error (I®Z) becomes a two-qubit phase error 
[Z <g> Z) due to the application of a CNOT gate f34|| ; if the code used could only correct single-qubit errors then as a 
result of the CNOT gate (unless it is applied transversally, i.e., not coupling physical qubits involved in representing 
the same encoded qubit) this code can no longer offer protection. In this scenario, therefore, the CNOT gate was not 
a fault-tolerant operation. Conversely, an operation is fault-tolerant if the code offers the same protection against the 
errors that appear after application of the operation (UEU^) as it does against the errors before the operation (E). 

A complementary ( "Heisenberg" ) picture to the ( "Schrodinger" ) description above is to consider the errors as 
unchanged and the code C, as well as the stabilizer Q, as transformed after the application of each gate: C i — ► UC 
and Q i — ► UQUK Then fault-tolerance can be viewed as the requirement that the new code is capable of correcting 
the original errors. This point of view will be particularly useful for our purposes. In our case the original errors 
are the elements of the Pauli subgroup Q (the stabilizer), and the gates U will turn out not to preserve the original 
code. Nevertheless, we will show that to the new stabilizer Q' = U QW corresponds a QECC (the transformed code 
C = UC) that can correct the original errors. In this way the fault-tolerance criterion is satisfied. 



4 The DFSs corresponding to the other ID irreps can also be turned into stabilizer codes by a redefinition of the subgroup, 
taking into account the minus signs appearing in the irrep under question. This kind of freedom is well known in the stabilizer 
theory of QECCs (H). 

The reader may wonder whether it should not be possible to simply take over the results about universal fault tolerant 
computation from stabilizer theory, and apply them directly in the present case. However, a problem is encountered when 
that construction is applied to the error-model considered here, because multiple-qubit errors may propagate back as (non- 
perturbative) single-qubit errors due to interaction with a "bare" (non-DFS) ancilla. We are indebted to Dr. Daniel Gottesman 
for pointing out this problem to us. 
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IV. ENCODED 5(7(2) FROM HAMILTONIANS 



We now begin in earnest our discussion of how to implement universal, fault-tolerant quantum computation on the 
Pauli-subgroup DFSs. In this section we show how arbitrary single encoded-qubit operations can be implemented 
fault-tolerantly. We will do so by generating the entire encoded SU(2) group from at most two-qubit Hamiltonians. 
We assume that the system Hamiltonian is of the general two-qubit form 

i—1 a— {x,y,z} i>j — l a,0={x,y,z} 

with controllable parameters {w"*}, 



A. Background 

Suppose we are given an error subgroup Q generated by the elements {<Zi}!=i- By the results of paper 1 we know 
how to identify the corresponding DFS, which is also a stabilizer-code with respect to the errors that anti-commute 
with Q. This QECC aspect will not be needed as long as we are only interested in storing information in this DFS: 
then the Q-errors will have no effect. However, here we are interested in the more ambitious goal of computing in 
the presence of the Q -errors, which means that we must be able to implement logic gates. As discussed above, these 
gates will take the states out the DFS and expose them to the Q-errors. To be able to compute we will need some 
basic results from the theory of fault-tolerant quantum computation using stabilizer codes, as developed primarily in 
Rcf. p4| ]. Let us briefly review these results. 

The set of operators which commute with the stabilizer themselves form a group called the normalizer of the code, 
N(Q). These elements are of interest because they are operations which preserve the DFS. Let q S Q, £ DFS(Q); 
if n G N(Q) then 

q{n\^))=nq\i>)=n\^), (4.2) 

so that n\ip) is in the DFS as well. Clearly, the stabilizer Q is in the normalizer N(Q) and so the only operations 
which act nontrivially on the subspace are those which are in the normalizer but not in the stabilizer: N(Q)/Q. While 
this means that these operations can be used to perform useful manipulations on the DFS, it also means that if they 
act uncontrollably, then they appear as errors that the code cannot detect. As will be seen later on, these are both 
crucial aspects in our construction. 

For any Pauli-subgroup stabilizer code, the normalizer is generated by the single qubit Xi and Zi operations, where 
i = I,..., I labels the encoded qubits p^ j. The bar superscript denotes that these are "encoded operations": they 
perform a bit-flip and a phase-flip on the encoded qubits. The gates X; and Zi, however, are by themselves insufficient 
for universal quantum computation. The usual stabilizer-QECC construction deals with (typically wncorrelated) errors 
that anticommute with the stabilizer. In this case, in addition to generating the normalizer of the Pauli group N(Px), 
one other operation is needed, such as the Toffoli gate f32|| . Such constructions have been covered in several recent 
publications [^2]- ^5| , p| . However, as emphasized above, the errors here are qualitatively different: not only are they 
always correlated, rather than anticommuting with the stabilizer, the errors are the stabilizer itself. Thus the usual 
construction does not apply, and we introduce a different approach. We show how to perform universal fault-tolerant 
quantum computation using the early S , J7(2)+CNOT construction [37 3^,0, but applied to encoded (DFS) qubits. 



B. A Useful Formula: Conjugation by n/4 

Instead of treating X and Z as gates, as in the usual stabilizer-QECC construction, we employ them as Hamiltonians. 
Since X and Z are in the normalizer, so are exp(i8X) and exp(i9Z), and so are any other encoded SU(2) group 
(denoted SU(2)) operations obtained from them. By applying operations from SU(2) alone we ensure that the code 
is preserved. To obtain other SU(2) operations from X and Z, we use the Euler angle construction [Q, which shows 
that any rotation can be composed out of rotations about only two orthogonal axes: 

exp[— iiv(n ■ cr)/2] = exp(— i[3a z /2) exp(—i9a y /2) exp(—iaa z /2). (4.3) 
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Here the resulting rotation is by an angle ui about the direction specified by the unit vector n, both of which are 
functions of a, (3, and 9. Using Eq. ( |4.3| ) and the mapping {o~ x , o~ y , <r z } i — ► {A, Y, Z}, we can construct any element 
of SU(2). To do so, we now derive a form of the Euler angle construction which is particularly relevant to operations 
with Pauli matrices. Assume that A and B are both tensor products of Pauli matrices (and thus square to identity). 
Then: 

exp(— i(p.A)B exp(+icpA) = (I cos ip — Ai sin <p)B(I cos ip + Ai sin <p) 

= B cos 2 (p + ABA sin 2 ip — i sin ip cos ip[A, B] 

B ii[A,B]=0 

Bcos2tp + iBAsm2tp if{A,B} = K ' 

For the special case of p> — ir/4 we define the conjugation with A by 

T A o exp(i9B) = exp(-i^A) exp(i9B) exp(+i^A) 



exp(iOB) if [A, B]=0 
exp[i0(iAB)] if{A,B} = 



(4.5) 



This can be understood geometrically as a rotation by tp — it /A about the "axis" A, followed by a rotation by 9 about 
B, followed finally by a (3 = — 7r/4 rotation about A, resulting overall in rotation by 9 about the "axis" iAB. All 
(p = 7r /4 rotations about a Pauli group member are elements of the normalizer of the Pauli group: they take elements 
in the Pauli group under conjugation to other elements of the Pauli group. 

Note that the "conjugation-by-^A" operation Ta ° exp(i9B) is equivalent to multiplication of B to the left by iA 
inside the exponent. This is very useful, since the elements of the normalizer of any stabilizer can always be written 
as a tensor product of single qubit Pauli matrices, i.e., as a tensor product of single-body gates. This is exactly the 
structure that is suggested by Eq. ( |4.5| ), and thus it should allow us to construct exp(i9X) and exp(i9Z) for any Pauli 
subgroup using at most two-body interactions. The caveat, however, is that while exp(i9X) and exp(i9Z) always 
preserve the code (since they are in the normalizer), the operations that generate them from Hamiltonians involving 
at most two-body interactions may corrupt the code, as explained in Sec, pi] above. 

Let us then state the challenges ahead: To show how the Hamiltonians X and Z can be generated using (i) at most 
two-body interactions, (ii) fault-tolerantly. 



C. Simple Example: The Subgroup Q4 

Let us pause by introducing a simple example illustrating the notion of universal computation using normalizer 
elements which are two-body Hamiltonians. Our example uses a group whose natural structure is such that the 
two-body restriction is automatically satisfied. To this end consider the subgroup Q 4 = {I® 4 , A 184 , y® 4 , Z® 4 }, which 
we studied in detail in paper 1. It is generated by A — Z = 4 — 1 = 2 elements (A® 4 , Z® 4 ), and therefore encodes I = 2 
qubits, with states given by 

|00) L = (10000) + 11111)) |01) L = (liooi) + 10110)) 

|10)i = -^ (11100) + 10011)) |11) L = -^ (10101) + 11010)). (4.6) 

These states are easily seen to be +1 eigenstates of Q4. The normalizer in this case contains two Aj and Zi operations, 
one for each encoded qubit: 

Ai = IX XI Z 1 = ZZII 

A 2 = XXII Z 2 = IZZI. (4.7) 

Indeed, we have, for example Ai |o, V)l = |1 — a, 6)l and Z\\a,b) l = (— l) a |a, 6)l, so Ai and Z\ act, respectively, as a 
bit flip and a phase flip on the first encoded qubit. As easily checked, Aj and Zi commute with Q4, so that they keep 
states within the DFS, as should be the case for normalizer elements. As Hamiltonians Xi and Zi are valid two-body 
interactions and hence can be used directly to generate the encoded SU(2) group on each encoded qubit. That is, 
exp(iaXi) and exp(i(3Zi) can be combined directly, with arbitrary values for the angles a and /3, to produce any 
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operation in 51/ (2) by using the Euler angle formula. For example, we can construct a rotation about the encoded Yj 
axis by conjugation: exp(iOYi) — exp(-ijXi) exp(—i8Zi) exp(+ijXi). We have, therefore, two independent encoded 
qubits which can be operated upon seperately by encoded 5/7(2) operations. 

What about coupling between the encoded qubits so that the full 51/(4) can be used to do computation? Note 
that Hamiltonians like Z\ ® Z% = ZIZI , which are two-body on the encoded qubits, can be implemented directly 
since they are also two-body on the physical qubits (this is not a generic feature, however, as discussed in Section V D 
below) . It is a fundamental theorem of universal quantum computation J37],|3?|[l2| that the ability to perform SU (2) 
on two qubits plus the ability to perform any nontrivial two-body Hamiltonian between these qubits is universal over 
the combined 5f/(4) of these two qubits. Thus we can perform universal computation on the Q4-DFS. In this case 
the normalizer elements which perform the 5/7(4) are all two-body Hamiltonians, and there is no need to apply any 
new methods in order to perform fault-tolerant computation which preserves this DFS. 

Anticipating the discussion in Section VI , note that while we have demonstrated universal computation on a single 
DFS-block, we have not yet addressed how to accomplish this when we have clusters of the Q4-DFSS. This, of course, 
is necessary to scale-up the quantum computer under the <34~ m °del of decoherence. In order to perform universal 
fault-tolerant computation with clusters, we must show that these can be coupled in a non-trivial manner. Methods 
for performing non-trivial couplings between clusters exist for any stabilizer code p4| . In particular, the Q4-DFS is 
a Calderbank-Shor-Steane (CSS)-code, whose clusters can be coupled by performing bit-wise parallel controlled-NOT 
gates between two clusters of qubits. This implements as desired an encoded controlled-NOT between these clusters. 
In Section VI we will discuss what is needed to make this procedure fault-tolerant 

Q4 is a special case because of the fact that the normalizer elements are all two-body interactions. In general the 
normalizer elements will be many-body interactions and more general techniques are needed, to which we turn next. 



D. Generating X and Z Using At Most Two-Body Interactions 



We now move on to the general case where the normalizer elements are possibly many-body Pauli operators. Our 
first task is to show that the "conjugation- by- jA v operation Ta exp(i9B) can be used to generate any many- 
body Hamiltonian inside the exponent using at most two-qubit Hamiltonians. In Section |v| we show that this is a 
fault-tolerant procedure if applied correctly to a DFS. 

Suppose the many-body Pauli Hamiltonian H we want to generate is of the following general form: 



*£®°f, (4-8) 



where J is some index set and b ^ J '. From Eq. (4.1) we have at our disposal a single-qubit Hamiltonian of, and a 



set of two-qubit Hamiltonians Aj — a^ 3 ® of with j e J and jj ^ [3. We call the 6 th qubit the "base qubit" . Aj and 
Ojf agree on one qubit index but differ on the Pauli matrix applied to that qubit, so they anticommute: {Aj, o^ } = 0. 
Let J(i) de not e the i th element in the index set J . If we use the "conjugation-by-jA^m" operation about exp(i8a^) 
[recall Eq. ( |4.5| )] we obtain: 

T Ajm o exp(i0ai) = exp[i8(ia 7 b JW ® ^Jof] = exp^a^ ® a"™], (4.9) 

where the sign is determined by that of £ 7j(1)/ g^ 1 , according to the usual rule of multiplication Pauli matrices: 

a a a = -i£ a (3 7 <7~<. (4.10) 

Applying all other "conjugation-by--|Aj-( i )" operations, i — l..|i7|, we obtain 

T Aj{lJl) o • • • o T Ajw o exp{ieaj) = exp I ±i0 (^) ^ ® of I . (4.11 

It is clear that by appropriately choosing the sequence of Pauli matrices, i.e., the a ju> , we can obtain rj = (3. Further, 
conjugating by — | (instead of +j) allows us to always adjust the sign in the exponent to +. Thus the action of this 
gate sequence is to generate the Hamiltonian H, as desired: 

T Aj{}Jn o ■ • • o T Asm o exp(*0o 6 7 ) = exp (i6H) . (4.12) 
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An example of this type of gate network (analyzed in detail in Section V C ) is shown in Fig. [I]. Since the eleme nts o f 
the normalizer of any stabilizer can always be written as a tensor product of single qubit Pauli matrices, Eq. ( 4.12| ) 
gives a constructive way of generating these normalizer elements as Hamiltonians (i.e., appearing as arguments in the 
exponent). We have thus met the first challenge mentioned abov e: we have shown how to generate the Hamiltonians 
X and Z using at most 2-body interactions. More generally, Eq. ( 4.12Q can be considered as a constructive procedure 
for generating desired many-body Hamiltonians from given two-body interactions. 

Finally, we note that it is perfectly possible to replace the central single-qubit Hamiltonian with a two-qubit one, 
specifically by A j(i)cr^ . This may be more convenient for practical applications, where control of two-body interactions 
may be more easily achievable (as in the case of exchange interactions in quantum dots p4| ) . This change would not 
affect our fault-tolerance analysis in the next sections. 



V. GENERATING ENCODED SU(2) FAULT-TOLERANTLY FOR ANY ABELIAN PAULI SUBGROUP 

We are now ready to show how to generate encoded SU (2) operations fault-tolerantly for any Pauli error-subgroup. 
Let Q be such a subgroup, generated by the elements |Q| = 2™. Recall that here these elements play the dual 

role of errors and of defining the DFS by fixing its elements. A new (transformed) stabilizer is obtained after each 
application of a gate exp(i(pjAj). To this sequence of stabilizers corresponds a sequence of stabilizer-QECCs Cj. Our 
strategy will be to find conditions on the Hamiltonians {Aj} such that after each gate application, the then current 
QECC is able to correct the original Q-errors. 

Let Qj [N(Qj)\ denote the stabilizer [normalizer] obtained after application of the gate Uj — exp(iipjAj). If tpj is 
an integer multiple of 7r/4 (as we will always assume) then there are only three mutually exclusive possibilities for the 
errors e € Q (we use the notations e and q for members of Q to emphasize the error and stabilizer element aspects, 
respectively): 

1. e G Qj'. The error is part of the transformed stabilizer. In this case the transformed code is immune to e (i.e., 
the transformed code is a DFS with respect to e), and there is no problem. 

2. e anticommutes with some element of Qj\ The error is detectable by the transformed code. 

3. e G N(Qj)/Qj (i.e., e commutes with Qj but is not in it): The error infiltrated the transformed normalizer. 
This is a problem since the error is undetectable by the transformed code, and acts on it in a non-trivial manner. 

Suppose the errors e G Q are exclusively of type 1. or 2. Then those that are of type 2. are not only detectable but 
also correctable. This is so because they form a group (Q), and therefore any product of two errors is again either of 
type 1. or 2., which is exactly the error correction criterion.^ Thus the problematic case is 3., and this is the case we 
focus on in order to make a prudent choice of Hamiltonians Aj . To simplify the notation, from now on we shall denote 
N(Qj)/Qj simply by Nj (and by N when Qj — Q), and refer to this as the normalizer (without risk of confusion). 
Is there a simple criterion to check whether e € Nj? The answer is contained in the following theorem: 
Theorem 2. — Given are a Pauli-subgroup of errors Q, its normalizer TV, and a sequence of their images {Qj} and 
{Nj} under conjugation by unitaries {Uj}, Corresponding to Q is a DFS (code) C. A sufficient condition so that no 
e G Q is ever in Nj/Qj is that either (i) each rij G Nj equals its source in N, or (ii) for each rij G Nj there exists 
m G N such that {rij,m} = 0. Then the transformed codes Cj = UjCj-% (C\ = U\C) can always correct the original 
Q-errors. 

Proof. — The normalizer is, by definition, the set of operations that commute with the stabilizer. Let us denote this 
by TV = Q' . What is N' (the set of operations that commute with the normalizer)? We have N' = (Q 1 )' , and claim 
that (Q'Y — Q^\ In other words, the only operations that commute with the normalizer are those in the stabilizer. 
Now let rij be the image of n G N after the j th transformation. The observation N' — Q allows us to exclude case 3. 
by checking if, for every rij G Nj (where rij ^ n), there exists m G -/V that rij anti-commutes with. To see this, note 
first that if rij = n then by definition rij cannot be in Q. Secondly, for an rij G Nj that differs from its source in TV, 
assume that it anti-commutes with some m G N. This implies that rij is not in the commutant of N, and is therefore 



Note that this is not true for errors in the usual stabilizer-QECC case, where the errors do not close as a group under 
multiplication. 

7 This is due to a fundamental theorem of C*-algebras, which states that if A is a f-closed algebra (i.e, a £ A => a) G .4) 
which includes the identity, then it is the commutant of its commutant: A!' = A 143]. These conditions apply to the stabilizer. 
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not in Q. If this is true for all rij G Nj then we have covered the entire new normalizer Nj and not found an element 
of Q in it. This guarantees that no element of the original stabilizer Q becomes a member of the new normalizer Nj. 
QED. 

Note that if the conditions of the theorem are satisfied then all elements of the original stabilizer are excluded from 
the transformed normalizer. Therefore also all products of stabilizer elements are excluded (since the stabilizer is a 
group), so that all stabilizer-errors are both detectable and correctable. 

Below we make repeated use of the result of Theorem 2. The first application is to show how to construct two-body 
Hamiltonians {Aj} which can be applied in succession to produce arbitrary normalizer elements, such that at every 
point the theorem is satisfied. To this end we need a basic result from the theory of stabilizer codes, regarding a 
standard form for the normalizer. We then illustrate the general construction with the relatively simple case of CSS 
codes, and finally move on to general stabilizer errors. 



A. Standard Form of the Normalizer for Stabilizer Codes 

It is shown in [^6| that, due to the fact that the normalizer is invariant under multiplication by stabilizer elements, 
the normalizer of every stabilizer code can be brought into the following standard form: 



(I 8> ■ ■ ■ ® I 8> Zj 8> I 8> ■ ■ ■ ® J) ® [M z j ® (I 8> ■ ■ ■ ® I) (5.1) 

i K - l ~ r 

(J 8) ■ ■ ■ 8) 1 8) Xj 8) I 8) ■ ■ ■ 8) I) (8 (iVf) 8) [M x j ■ (5.2) 



K-l-r 



Here M 3 Z = ®neZjZ n , N z = (3 n 'ez'Zn' and M 3 X — ®i^x } Xi, where Zj, and Xj are (possibly empty) index sets 

of lengths r, r and K — I — r respectively (i.e., M J Z , N J Z and M x are tensor products of I's and single qubit Pauli 
Z and X matrices, respectively). Recall that K is the number of physical qubits; I is the number of encoded qubits. 
The exact form of M z , N z and M x , as well as the value of the integer r, can be found from the stabilizer flq] , but 
is unimportant for our purposes. We only need the result that for every pair of encoded Z and X operati ons , actin g 



on the j encoded qubit, it is possible to express the operations in the blockwise product shown in Eqs. (5.1), (5. 2) 



B. CSS-Stabilizer Errors on One Encoded Qubit 

For simplicity, let us now restrict attention to the case of a single encoded qubit in CSS codes, i.e., th ose c ode s 
where every Z and X can be written as a product of only Z's and only X's, respectively. Then, from Eqs. (|5.l| ),( [5~^ ) 
the standard form is (dropping the j index): 

Z = Z x ® M z ® I® K - l - r (5.3) 
X = X x ®I® r ®M X , (5.4) 

i.e., Nz = I® r ■ Our goal is to construct such Z and X from single- and two-body Hamiltonians. We shall do this by 
starting from the single body Hamiltonians Z\ and X\, and conjugating by certain two-body Hamiltonians. The idea 
is to successively construct the Z's in Mz and the X's in Mx- We claim that the required two-body Hamiltonians 
have the natural form 

A n = X x Z Zn z n £Z (5.5) 
Bi = Z x X Xi Xl g X, (5.6) 

where n — l..\Z\ and i = i.e., A n (Bi) has a Z (X) in the n th (i th ) position of the index set Z (X). If there 

is an even number of Z's in Z then the last Hamiltonian should be taken as At z i = X± [since as we show below 
in that case in the penultimate step we have Y\ 85 Mz 8) l® K ~ l ~ r for Z], and similarly for the last B^ Note that 



8 For example, suppose ~Z = Z(ZZZ)(II) and X = X(III)(XX); then A\ = XiZ 2 , A 2 = X X Z%, A 3 = XiZ 4 , A 4 = Xi 
and Bi = ZiXs, B 2 = ZiX 6 . Then we have: Z(III)(II) A Y(ZII){II) A Z(ZZI){II) A Y(ZZZ)(II) A Z, and 
X(III)(II) ^ Y{III){XI) ^ X. 







[A n , X] = [Bi, Z] = 0, so that transforming Z does not affect X, and vice versa. There are now two ways to construct 
Z and X fault-tolerantly: in parallel or in series. The parallel implementation has the advantage that it requires only 
three basic steps and thus is very efficient. Its disadvantage is that it may be hard to implement in practice because 
it requires simultaneous control over many qubits. 



1. Series Construction 



We assume throughout this discussion that we wish to generate exp(i9Z). The symmetry between Z and X in the 
CSS case implies that our arguments hold for exp(i9X) as well, with obvious modifications. 

The series construction consists of applying first the sequence of gates {exp(ij^4„)}[ l J 1 , then the gate exp(i9Zi), 
and then the reverse sequence of gates {exp(— *f ^n)}^^ ■ An example is shown in Fig. |l|. First, as an application 



of the general Eq. (4.12), let us prove that this procedure indeed generates exp(i6*Z): 



T Al o T A2 o • • • T A o exp(i6>Zi) 



)exp 



n=l 



exp(z#Zi) 



n=\Z\ 



exp ( +i— A 7 



\z\ 



exp (-)\ z kez\ , 



(5.7) 

where in the first line we used the definition of the "conjugation-by-f A„" operation, in the second the result that 
this operation corresponds to multiplication inside the exponent, and in the third the form in Eq. ( |5.3| ) for Z. Note 
that the reason we have a series of conjugation- by- jA n operations (as opposed to trivial identity operations) is that 

{Iln=i A n Zii Ak} = Vfc < \Z\. Finally, we can eliminate the minus sign [if \Z\ is odd] by changing one of the f 's 
to-f. 

Next we must demonstrate that the conditions of Theorem 2 are satisfied at each point in the corresponding circuit 
in order to guarantee the fault-tolerance of this implementation. Let us divide the proof into three parts, by following 
the transformations of the normalizer elements before and after the central exp(i9Zi) gate, and showing that either 
Z or X anticommutes with the transformed normalizer at each step along the way. 

Errors before the central gate: 

ni 



t 

_i , Z is transformed to Z 



After application of the first k gates |exp(zf A rl ) r , 
unimportant factors of i from now on). From Eq. ( p.5|) the product is 



_j A n Z (we neglect the 



n 



z 7 



if k = 21 
if k = 21 + 1 



Therefore, using the standard form: 



2/ 



2/ 



H A n Z X=]J Z Zn ZX = -X J] Z Zn Z = -X J] A n Z , 



(5.8) 



(5.9) 



n=l 



(2/) 

so that {Z , X} = 0. On the other hand 



/2/+1 



2;+i 



21+1 



n a ^ z ) z = n z *~ zz = - zxi n z ^ z = - z n a * z 



(5.10) 



so that {Z^ 2 ' +1 \ Z} = 0. Thus Theorem 2 is satisfied after each gate application, with Z and X alternating in the 
role of the anticommuting original- normalizer element. 
Error immediately after the central gate: 

At the end of step (i) Z has been transformed to Z\. Since the central gate (Q- rotation) uses only Z\, the transformed 
Z does not change. Therefore is still anticommutes with the original X and satisfies the criterion of Theorem 2. For 
the same reason, however, X is transformed by the central gate: 
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X i — > Xg = X cos(26>) + iXZx sin(20). (5.11) 
Thus it suffices to show that Xg anticommutes with Z , which is true since [Z , Z{\ = 0: 

~X ~Z = XZcos(26>) + iXZ{Zs\n{2e) = -ZXcos(2<9) - iZXZ 1 sin(20) = -ZXg. (5.12) 
Errors after the central gate: 

After application of the first k' inverse gates {exp(— «f^4n)}|2| z\ +1 ' ^ ^ s transformed to Z ^ = []' =1 

Therefore the same reasoning as in (i) applies to Z'^ . As for X (which is now Xg ) , the X cos(26>) component commutes 
with the inverse gates exp(— ijA n ) so that it does not change. The iXZ\ sin(2#) component, however, anticommutes 
with the inverse gates exp(— i^A n ). Therefore it flips back and forth between iXZ\ sin(2#) and iXY\ sin(20). These 
terms anticommute with the original Z and Y, respectively. But so does the Xcos(20) component, so their sum 
anticommutes alternately with the original Z and Y. 

We conclude that Theorem 2 is satisfied at each stage of the circuit. Therefore the series construction is indeed 
fault-tolerant. Of course, this fault-tolerance is achieved in practice by supplementing the circuit with error-detection 
and correction procedures after each gat e (th e parallel construction discussed next is much more economical for this 



reason). We discuss this issue in Section VII 



2. Parallel Construction 



Since the A n (Bi) all commute, the corresponding gates can also be implemented in parallel. That is, 




(5.13) 



can be used as parallel gates in our circuit (see Fig. H for an example). To see directly that this circuit really does 
implement the normalizer gate exp(i9Z) [or exp(i8X)], observe that, by definition {A n , Z{\ — {Bi, X\\ = for all n 
and i. This means that conjugation of Z\ by Ua will act as multiplication by Unez anc ^ thus transform Z\ to Z 
(without changing X\). The same is true for X\ by changing Z's to X's and Ua to Ub- Therefore UaZ\U a = Z and 
UbXiU b = X , from which follows immediately by Taylor expansion that: 

U A exp{i6Zi)U\ = exp(i9Z) 

U B exp(i9Xi)U B = exp^X). (5.14) 

This too is a fault-tolerant construction. The reason is that it corresponds to looking at the series construction just 
at the following three points: right before the central gate, right after the central gate, and the end. 



C. Example: The Subgroup Q2X 



As an example with a many-body normalizer element, consider the Pauli subgroup/stabilizer generated by the 
errors XXII, IXXI, IIXX: 

Qix = {mi, xxii, xiix, iixx, xixi, ixxi, ixix, xxxx}. (5.15) 

It describes a physically interesting error-model, of bit-flip errors which act on all pairs of nearest neighbor qubits. 
This situation is of interest, e.g., when decoherence results from spin- rotation coupling in a dipolar Hamiltonian, 
typical in NMR Q: 

j,k 3 k 
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Here 7j is the gyromagnetic ratio of spin j, Vjk is the distance beween spins j and k. In the anistropic case (e.g., a 
liquid crystal) this can be rewritten as 

^=£?^ t 9t{^^4)yr- p , (5.i7) 

j,k 3 k a,0—-~L 

where Y™ are the spherical harmonics and g"j? is the anistropy tensor. When g"^ = 5 a o5pogjk only the erj ® tr| 
terms remain (coupled to Y^ ), which leads to decoherence described by the subgroup Qiz (defined similarly to Qix\ 
analyzed in paper 1. 

To find the DFS under Q2X, we construct in accordance with the techniques of paper 1 the projector P = ^ 
(corresponding to the identity irrep of Qix), where the sum is over all G Qix- Applying this projector to an 
arbitrary initial state we find a 2-dimensional DFS, spanned by the states 

|0 L ) = (|0000) + |0011> + |0101> + |0110) + |1001) + |1010) + |1100) + 1 1111>) /V8, 

\\ L ) = (|0001) + |0010) + |0100) + |0111) + |1000) + |1011) + 1 1101) + 1 1110)) /VS. (5.18) 

This DFS thus encodes a full qubit. 

Since for Qix there is just one encoded qubit, we expect to find just one X and one Z. In the case of Qix it is 
easily verified that the normalizer is generated by 

X = XIII, 

Z = ZZZZ. (5.19) 

X is already a single-body Hamiltonian and therefore can be implemented directly. Let us show how Z can be 
implemented as a Hamiltonian using at most two-body interactions. 

Note that Q2X support s a CSS code. Comparing the above expressions for Z to the standard form for CSS 



normalizer elements [Eq. (5.3)], we have Mz = Z^Z^Z^ and Mx — 0- Therefore, from the recipe of Eq. (p.q): 
A n = XiZ n+ i for n = 1..3, while A4 = X\. The series-circuit implementing exp(i9Z) thus has the form depicted 
111 Fig. |. The parallel versio n of the same circuit is shown in Fig. 0. To verify directly that these circuits indeed 



implement exp(i9Z) use Eq. ( 4.12 ) and choose the base qubit to be the first qubit. Then: 



Txzn o Txizi o T XII z o Txin o exp(idZIII) = exp(i6ZZZZ). (5.20) 

As required, this is an implementation that uses at most two-body interactions. 

Fig. [j] also shows the transformed Z at each point, and directly below the original normalizer element (X or Z) 
that this transformed normalizer element anticommutes with. This verifies that the circuit is indeed a fault-tolerant 
implementation of exp(i9Z) for Qix- 



D. CSS-Stabilizer Errors on Multiple Encoded Qubits 

The CSS case of more than one encoded qubit is a simple extension of the single encoded qubit case discussed 



above. From Eqs. (5.1), (5. 2) the standard form for a CSS code is now: 



Zj = Zj <g) M j z $ I® K -l-r (5.21) 
Xj = X, ® I® r ® M j x . (5.22) 

Operations on different encoded qubits j,j' commute. Therefore the single encoded qubit constructions still holds 
when the Hamiltonians are modified to read 

A« = X 3 Z Zn z n e Zj (5.23) 

B\ j) =Z 3 X Xt Xi&Xj. (5.24) 

As is easily checked, the entire proof for the single encoded qubit case carries through when the base qubit becomes 

— ®z 

physical qubit number j instead of number 1. This thus allows us to fault-tolerantly implement SU(2) on all I 
encoded qubits. 

To couple encoded qubits within the same block [thus generating SU(2 1 )}, one could use a standard trick from 
stabilizer theory using an auxiliary block to swap information into and out of. This transversal operation 



involves applying encoded controlled-NOT operations, which we treat in Section VI below. In that Section we also 



show how coupling multiple encoded qubits can be achieved directly, without resorting to an auxiliary block. 
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E. General Stabilizer Errors 



The entire analysis for the CSS case ca rrie s through in the general stabilizer case for the implementation of cxp(i9Z), 
since Z remains unchanged [recall Eq. (5.1)]. However, the encoded X operation now includes the additional block 
Nz- X = X\ ® Nz <8> Mx [Eq. (5.2)]. Therefore to generate this operation we must include a new set of Hamiltonians: 



Z\Z n 



i' € Z'. 



(5.25) 



If there is an even number of Z's in Z then the last Hamiltonian should be taken as C\z<\ — Z\. We now need to 
repeat the analysis for the generation of exp(i9X). Again, there is a series and a parallel construction. Since the C n > 
and Bi all commute, the gate 



Ubc = U b ®U c = 



I exp 



.iex 



B, 



exp 



.n'eZ' 



exp 



£ (e^+e^ 



(5.26) 



can be implemented in parallel. Conjugation of exp(i6X\) by Ubc will yield exp(i#A) by Eq. ( 4.12| ), since {X\, Bi} = 
{Xi, C' n '} = 0. It is further straightforward to check that this is a fault-tolerant implementation, since the arguments 
used in the case of a single encoded CSS qubit are still valid here. 

We are thus left to check only the series construction. Here the only new element is that we must make sure that the 
application of the C„' Hamiltonians does not allow for undetectable errors to take place. Apart from this everything 
is the same as in the CSS case. Now, after application of the first k gates {exp(z : |C„'}^, =1 , X is transformed to 

X (k) = U k n'=i C n>~X- This product is: 



n'&Zl Z n> if k = 21 



n'GZ', 



Zn 



if k = 21 + 1 



(5.27) 



where Z k are the first k elements of the index set Z'. Therefore 



{x {k \z} 



(z x f Y[ z n ,x 



n'EZ. 



(z x t n z n ,x 



n'EZ. 



(Zif n 



n'EZ. 



{X,Z} = 0. 



(5.28) 



Thus Theorem 2 is satisfied after each C n '-gate application, with Z playing the role of the anticommuting original- 
normalizer element. This means that use of the Hamiltonians C„' does not spoil the fault tolerance of the circuit. We 
know from the calculations in the single encoded qubit case that the rest of the circuit is also fault tolerant. Hence 
we can conclude at this point that our method of constructing normalizer elements is fault tolerant for any stabilizer 
code. 



F. Summary 

Let us recapitulate the main result of this section. Given a set of errors corresponding to some Abelian subgroup 
of the Pauli group (i.e., a stabilizer), there is a DFS which is immune against these errors. We have shown how to 
implement arbitrary encoded SU (2) operations on this class of DFSs. To do so, we gave an explicit construction of 
encoded a x and a z operations, which together span encoded SU(2)'s for each DFS-qubit. The construction involves 
turning on and off a series of one- and two-body Hamiltonians for a specific durations. Each such operation takes the 
encoded states outside of the DFS. However, our construction guarantees that the errors always remain correctable 
by the code formed by the transformed states. That is, these states form a QECC with respect to the Pauli subgroup 
errors. Therefore, our construction works by supplementing the unitary gates executing the encoded a x and a z 
operations by appropriate error correction procedures. To complete the construction, we still need to show how to 
execute encoded two-body gates, and how to fault-tolerantly measure the error syndrome. This is the subject of the 
next two sections. 
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VI. ENCODED CONTROLLED-NOT 



The unitary controlled-NOT (CNOT) operation from the first qubit ("control qubit) to the second qubit ("target 
qubit") can be written in the basis of cr z eigenstates as: 

t/cNOT = f o X ) ^'^ 

(where each entry is a 2 x 2 matrix). Since we are working in the Heisenberg picture it is useful to consider how 
two-qubit operators transform under CNOT. For example, 

X ® J,— t/cNOTpf® = (1 i) (° T l)(l i) = (i^)- (6.2) 



cnot ~ ^0 X J \ I J \ X J ~ \X / 
As is simple to verify, the full transformation table is: 

X®I\ — > x®x 

I®X\ — > I® X 
Z®Ii — > Z®I 

I®Zi — >Z®Z. (6.3) 

Since U(A ® B)W = U(A ® I)WU(I ® B)U\ the rest of the transformations under CNOT follow simply by taking 
appropriate products of the above, e.g., X ® Z = (X ® I) (I ® Z) i — ► (X ®X)(Z®Z) = -Y® Y. We need to show 
how to fault-tolerantly construct an encoded CNOT operation for the DFS corresponding to a given Pauli subgroup 
of errors. 

A. CSS-Stabilizer Errors 

It is well known that a bitwise CNOT gate between physical qubits in different blocks is an operation that preserves 
any CSS code, and acts as the encoded CNOT gate between the blocks encoding different qubits p4| . However, this 
is true only at the conclusion of the operation, i.e., after all the bitwise operations have been applied. During the 
execution of the bitwise operations the codewords are exposed to errors. To demonstrate this, consider the transfor- 
mation of the normalizer elements of a CSS code. Let CNOTj- A j B denote the CNOT operation from control qubit j 
(in the first block A) to target qubit j (in the second block B). For definiteness let us consider the transformation of 
Xj ® I® K under bitwise CNOT's. Then, because of the standard form for Xj, the first CNOT operation is applied 
from control qubit j, and subsequent CNOT's from contr ol qu bi ts de termined by the index set X , i.e., acting on pairs 
of p hysic al qubits at positions {(«a, is)}iex- Using Eqs. ( 5.21 ),( 5.22| ) for Zj and Xj, and the transformation table of 



Eq. (J6.3D, we find: 

Xj ® I® K = [Xj <g> I® r <g> M x ] ® [I m ® I® r ® I® K - l - r ] 
\Xj <g> I® r <g> M x ] O [X 3 ® I® r ® l® K - l - r ] 



CNOT^, JB 
CNOT ilj4iill 



[Xj ® I® r ® M x ] ® [Xj ® I® r ® X n ] 

... i — ► [X 3 ® I® r <gi Af x ] O [Xj- J 0r «) Mx] = Xj ® Xj. (6.4) 



Similarly one can check that the rest of the transformations of Eq.( |6.3| ) are satisfied at the encoded level. Therefore 
this calculation demonstrates that the full bitwise CNOT gate indeed acts as an encoded CNOT operation, since 



it transforms encoded normalizer operations according to the transformation rules of CNOT, as per Eq. (6.3). In 



our context this implies that given a certain Pauli subgroup of errors, application of the full bitwise CNOT gate will 
implement the CN OT gate on the DFS in a way which keeps the codewords inside the DFS at the end of the operation. 
However, as in the SU (2) case, this is not true at intermediate steps, meaning that the code leaves the DFS.0 As 
in the SU(2) case, we must check that the original errors are still correctable at each intermediate step. Theorem 



9 Note that this is equally true for stabilizer-QECCs, which are thus exposed to errors during gate execution. 
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2 will still apply if error correction procedures are implemented on each block separately, after each bitwise CNOT 
operation (since the blocks are only coupled during the execution of the CNOT). Therefore we need to check that 
for each block in which the normalizer changed, there exists an e lement in the original normalizer that anticommutes 
with the transformed normalizer. It is easy to see from Eq. (6.4) that Xj does not change in the first block, and the 
sequence of transformed Xj's in the second block anticommutes with Zj at every step. Therefore error correction is 
possible at each intermediate step. 

To complete the construction it is necessary to check that the remaining normalizer elements arc appropriately 
transformed. Repeating the calculation of Eq. (6.4) it is straightforward to check that this is true, namely: 



I® K <g> Xj 



z< 



®Xj 

I® K 



(6.5) 



Xj and Zj <g> I® K invariant under the bitwise CNOT's (thus requiring no error correction), and the 



with I® K <g> 
transformed 

This completes our demonstration that a CNOT gate can be implemented fault-toleranty using bitwise CNOT's 
in the CSS case. 



Zj anticommuting at each step with the original X 3 



B. General Stabilizer Errors 



In the non-CSS case the bitwise CNOT does not act as a CNOT. One quick way to realize this is to note that 
since X®1 1 — ► X ® X, by unitarity X £5 X i — ► X CEP I, but this is not the case at the encoded level: 

X®X = [X 1 <g>N z ® Mx] <S> [X K +i <8> N z <B> Mx] 

.— > [Xi ® I® r ® M x ] ® [I K+l ®N Z ® l® K ~>--r] ^X®I® K . 



Thus a different implementation of the CNOT is needed. Now, it is clear that if the product of stabilizers for 
different blocks (each encoding one qubit or more) is mapped to itself at the end of the CNOT implementation, 
then the stabilizer errors will not have changed, the DFS qubits will not have changed, and thus the DFS-code still 
offers protection against the stabilizer errors. Gottesman |}4| has given such an implementation of the CNOT for 
arbitrary stabilizer codes. It uses transformations involving 4 blocks at a time, where two blocks serve as ancillas 
and are discarded after a measurement at the end of the implementation. We will not repeat this analysis here - 
the interested reader is referred to p. 133 of Q for details. The faster the gate sequence implementing this CNOT 
is executed compared to the timescale for the errors to appear, the higher the probability that the code will not 
be taken outside of the DFS. However, as shown in Appendix |X| the gate sequence (Fig. 2 of |34j]) does not have 
the property we have been able to demonstrate above for all our constructions, i.e., it allows for errors to become 
part of the transformed normalizer. Therefore we cannot use this construction. Instead we now introduce a different 
construction for the CNOT, in the spirit of what we have done above for the SU(2) operations. 

Consider two blocks A and B encoding one DFS qubit each. We already know how to implement exp(i9lA 0Xb)- 
Suppose one can also implement exp(i8Z A <£> X B ). Then by use of the Trotter formula exp[i(tiOi + tiO-i)lri\ = 
Hindoo [exp (i—Oij exp (^02)1™ [Hi or its short-time approximation 

exp[i£(Oi + 02)/n] = exp[itOi/n] exp [it0 2 /n] +0(n- 2 ) (6.6) 
valid for arbitrary operators 0% and O2, we can form, to any desired accuracy 

expR/, ® X B - Z A ® X B ),2] = ( I exp( ° Zfl) ) . (6.7) 



For = tt/2 this is the CNOT operation between the two blocks. Thus our problem reduces to showing how 
exp(z6'Z y i (g> Xb) can be implemented fault-tolerantly for arbitrary stabilizer DFSs. 

Consider the circuit shown in Fig [| It describes the implementation of Z and X operations, as in the SU (2) case, 
with the difference that the single-body central gates have been replaced with a two-body gate, generated by the 
Hamiltonian Hab = Z^ <g) Xf (here A and B are the two blocks and the subscript 1 indicates the first physical qubit 
in each block). By the SU{2) construction we have that U A Zfu\ = Z A and U B XfU B = X B (recall Sec. |VB2j ). 
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Therefore, using the fact that for any non-singular matrix M the equality M exp (if) M 1 = exp(MHM 1 ) holds, 
the gates in Fig. || yield: 



(U A O U b ) exp(i0H AB ) (u A ® [/£ ) = exp [ifl (rj A ® Cf B ) if AB (V* 



, A ®W B 



<-x P ie(u A zfu A 

= exp (i^Z^ (g) I fl ) , 



(u B x?ul 



(6.8) 



as desired. 

It remains to verify that this is a fault-tolerant construction. The only difference compared to the SU(2) construction 
above is the fact that we are now using a fwo-body central Hamiltonian. It is reasonable to assume that if the 
system can couple the two blocks connected by this Hamiltonian, then so can the environment. Therefore instead 
of considering the error subgroups Qa and Qb separately, we must now consider the new error subgroup Qa x Qb- 
But then the appropriate normalizer is Nab = N A x Ng, and the sequence of transformed normalizers satisfy 
Nab.] — Naj x Ng,j- This makes the fault-tolerance verification task very simple: We already checked in our 
SU(2) discussion that Theorem 2 is satisfied for each block separately. Now, clearly both N A <8> is, I A C3> Nb € Nab- 
Therefore, since for every transformed normalizer element in N A .j [Nbj] there is an anticommuting element in the 
original normalizer Na [Nb], it follows that N A (g> is [I a <8> Nb] will correspondingly anticommute with the elements 
of N A B,j- This means that Theorem 2 is satisfied also for the combination of blocks A and B, and fault-tolerance is 
guaranteed as in the SU ( 2) ca se. 

As promised in Section VD, the construction presented here also applies to multiple qubits encoded into a single 



block. To see this, consider the case of two encoded qubits in the same block, and let us show that we can generate 
exjp(i9Zi ® Z 2 ) between them. This coupling, together with single encoded-qubit operations, suffices to generate 
SU(2 l ) (for I encoded qubits in a block). Now, from the standard form we have: 



Zi 
Z 2 



Zi 
z 2 



<M X Z 
Mf 



(6.9) 
(6.10) 



Let Z\ = U\Z\U{ and Z 2 = U 2 Zp\. Note that p\,Z 2 ] — p 2 >Zi] = since ?7i(2) contains X 2 (i). For the same 
reason also [Z7i, U 2 ] — 0. Therefore: 



(tii ® U 2 ) exp(i6Z 1 <g> Z 2 ) (Ul ® U. 



%B (Ui ®U 2 )Z 1 ®Z 2 (ul ® U\ 

16 (uiZxvty ® (u 2 z 2 u£) 



= exp 
= exp 
= exp (iOZi ® ~Z 2 



(6.11) 



The same idea can be used to implement CNOT between multiple qubits encoded into a single block. We have 
thus provided a fault-tolerant implementation of CNOT for any stabilizer DFS. 



VII. FAULT TOLERANT MEASUREMENT OF THE ERROR SYNDROME 



So far we have taken for granted that error detection and correction is possible in between gate applications. We 
now complete our discussion by showing that it is indeed possible to do so fault-tolerantly. This requires the ability 
to measure the sequence of transformed stabilizer generators in a manner that does not introduce new errors in 
a catastrophic way. To accomplish this fault-tolerant measurement we follow, with some modifications, the usual 
stabilizer construction p6| . 

Let us recall the basics of measurement within stabilizer theory. A DFS state in the stabilizer Q is a +1 
eigenstate of all elements of Q. An error e is an operator that anticommutes with at least one element of the stabilizer 
Q, say q. If \ip) € Q then qe\tp) = —eq\ip) = —e\ip), so that e\ip) is an eigenstate of q with eigenvalue —1. Therefore 
each generator measurement that returns the eigenvalue +1 indicates that no error has occured, while each —1 result 
indicates an error, which can be fixed by applying the error e to the state. The sequence of ±l's that results from 
measuring all stabilizer generators is called the "error syndrome" . The identity of e is uniquely determined by this 
"syndrome" , since the measurement process projects any linear combination of errors to an error in the Pauli group. 
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A. CSS-Stabilizer Errors 



In this case the stabilizer generators contain either products only of Z's ("Z-type") or products only of X's ("X- 
type"). Suppose we wish to measure a Z-type stabilizer generator. The +1 eigenstates of such a generator are the 
"even parity states", i.e., those states containing an even number of |l)'s. Prepare an ancilla in the encoded |0l) state 
(below we discuss how). Then for each data qubit where the given stabilizer generator has a Z (not an I) apply a 
controlled- X from this qubit to the ancilla. The ancilla will flip every time the data qubit was a |1), so measuring 
the ancilla at the end and finding it in |0i) will indicate no error (even number of flips), whereas will indicate 
an error (odd number of flips). Distinguishing between |0l) and amounts to measuring Z on the ancilla, which 
we can do directly by measuring Z on all those ancilla qubits whose Z has a Z. 

Now suppose we wish to measure an X-type stabilizer element. The same procedure as for Z-type generators can 
be applied, with one modification: a Hadamard transform 

must be applied before and after the controlled- X operation. The effect of the Hadamard transform before the 
controlled- X operation is to change the corresponding qubit into the Z-eigenbasis, whence the Z -type construc- 
tion applies. The second Hadamard transform returns the qubit to the original basis. This construction is shown 
schematically in Fig. |I| 

Note that since X is in the normalizer, it commutes with all stabilizer errors. This means that any such error 
occuring on the ancilla before the X is equivalent to the same error after the X, and therefore the error has no effect. 
In other words, neither does the ancilla ever leave the DFS under the application of X , nor can an error on the ancilla 
propagate back to the data qubits j^] Note further that since the ancilla is at all times unentangled from the data 
qubits the measurement is non-destructive on the data qubits. 

What if a stabilizer error occurs on the data qubits right after the application of the Hadamard gate? This can 
clearly present a problem, since it may for example flip the data qubit controlling the X applied to the ancilla. 
One (standard) way of dealing with such errors is to repeat the measurement several times in order to improve our 
confidence in the result. An alternative is to use concatenated codes ]35| , p9| -^l| . This will be of use if the stabilizer 
error is correctable by the transformed code, i.e., if we can verify that the conditions of Theorem 2 are satisfied. Then 
we can use the DFS at the lowest level, and concatenate it with the QECC it transforms into under the stabilizer 
errors (see Ref. |2j| for concatenated DFS-QECC in the collective decoherence model). Now, recall the CSS form 
of the normalizer elements, Eq. (|5.3|). For every Hadamard transform in the first set (i.e., before the controlled- X 
operations) on a qubit in a position corresponding to an X in an X-type stabilizer generator, the normalizer elements 
transform by having X and Z interchange in this position. In the standard form of Eq. ( |5.3[ ), if this happens to be 
the first qubit then Z i — > X (g) Mz <8> I, which anticommutes with the original Z, and X i — > Z ® I <g> Mx, which in 
turn anticommutes with the original X. If the position of the X in the X-type stabilizer generator is where Mz has 
a Z, then Z i — > Z <g) M' z <g> /, where M' z has that Z changed into an X. This transformed Z anticommutes with the 
original X. Similarly, X i — > X (g> J ® M' x with an X changed into a Z, and this transformed X anticommutes with 
the original Z . Thus the conditions of Theorem 2 are again satisfied. 

The second set of Hadamard transforms restores the original normalizer. One then proceeds to measure the next 
stabilizer generator. We thus see that this measurement procedure is fault-tolerant of stabilizer errors. 



B. General Stabilizer Errors 



In the non-CSS case the stabilizer generators may contain Y's as well, so our analysis above requires some modifi- 
cations. The unitary operation that transforms Y to Z is 

°-U"\ (7 - 2) 



This DFS-construction is different than in the usual QECC-stabilizer construction, where multiple control operations to the 
same ancilla-qubit are not fault-tolerant because they are not transversal. There multiple CNOT's from different data qubits 
to the same ancilla qubit can cause errors to spread catastrophically if the ancilla qubit undergoes a phase error (recall that 
under CNOT, / ® Z h-> Z ® Z). 
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It also maps Z i— » X i— » Y . When this operation is applied immediately before the controlled- X to the ancilla and 
immediately after it for every Y in the stabilizer, the Z-type construction applies again. However, for the purpose of 
concatenation we need to c heck t hat the procedure is still fault-tolerant of stabilizer errors. The normalizer generators 
now have the form of Eqs. (5.1), (5. 2). Every time a Hadamard or Q operation is applied, Z i— > X in a single position 
in Z. Similarly, Z h I, or I h Z (if Hadamard) or Y (if Q) in a single position in X. 

The case of the transformed Z is trivial: if Z i— > X anywhere then the transformed Z anticommutes with the 
original Z. Consider the transformed X. The possibilities are: (i) X\ i— > Z\ or Yi, (ii) Z i— > X in the Nz part, (hi) 
X i— > Z or Y in the Mx part. In all these cases it is easily verified that the transformed X anticommutes with the 
original X. Therefore the measurement procedure is fault-tolerant also in the non-CSS case. 



VIII. OUTLOOK: IMPLICATIONS FOR THE INDEPENDENT-ERRORS MODEL 

The methods we have introduced in this paper need not be restricted to stabilizer-errors. In this section we briefly 
touch upon the implications of our construction for universal quantum computation in the independent errors model, 
when stabilizer-errors are taken into account as well. We thus generalize the standard treatment of stabilizer codes 
p4| , where stabilizer errors that may occur during the course of gate implementation are ignored. However, we are 
here only able to consider independent single-qubit errors, so that the inclusion of the special type of correlated 
many-body errors represented by the stabilizer-errors is a rather unrealistic error model. The main importance of the 
result presented here is that it suggests an alternative route to universal quantum computation that is fault tolerant 
with respect to error detection, and is highly parallelizable. We believe that this may lead to an improved threshold 
for fault tolerant computation in the setting of concatenated codes ]5lJ . 

Let us recall the error detection and correction criteria for a stabilizer code Q = {q^} to be able to deal with all 
single qubit errors: 

Vi,j,a,0 3ks.t. {q k , of <8> of } = (8.1) 

Can we implement encoded SU(2) operations in the independent errors model similarly to what we did above for 
stabilizer-errors? To do so we need to make sure that the errors do not become part of the sequence of transformed 
normalizers. The important difference compared to the stabilizer-errors case is that now the errors are "small" (single- 
body), which means that we must avoid using a single-qubit Hamiltonian as a central gate (for it is a normalizer 
element which will not be distinguishable from an error). If we restrict ourselves t o usin g two-body Hamiltonians as 



central gates (which we can always do - recall the comment at the end of Section IV D ), then we run into a similar 



problem regarding the two-body form of Eq. (|8.l|), i.e., if the central gate uses the Hamiltonian of ® o^ then we will 



not be able to correct the two errors of and of. However, as we now show, as long as we use a two-body central gate 
it is nearly always possible to satisfy the error detection criterion, Vi, a 3k s.t. {qk, of} = 0. 

Let us demonstrate this explicitly for Steane's 7-qubit code This is a CSS code encoding one qubit into seven, 
and in standard form has the normalizer: 

X = X\X§Xq 

Z = Z 1 Z 3 Z 4 . (8.2) 
Consider the gate construction [derived from Eq. (pl|)] 

exp(i(9Z) = T Xl z 3 ° cxp(i6>YiZ 4 ). (8.3) 

The normalizer transforms as: 

X hI^ 3 X £5> cos(26»)X + i sin(20)Z 1 Z i X 5 X 6 ^ cos(26»)X + sin(26»)F = X exp(2i6Z) 

Z £4 3 Y X Z± YtZ A ^ Z. (8.4) 

We see that at no point does a single-qubit error become part of the transformed normalizer, so that all single qubit 
errors are detectable. On the other hand, while we can always detect the occurrence of both the Yi and Z^ errors, we 
cannot distinguish between them after the first gate has been applied (since our normalizer is Y\Z\ at that point). 
Since we might accidentally try to reverse the error Y\ when in fact the error Z4 has taken place, this means that our 
construction is fault tolerant only for error detection. Similarly, the gate construction 

exp(«0X) = T Zl x 5 o exp(z0YiX 6 ) (8.5) 



18 



yields 



~X ?^~> 5 Y\Xq T 1 ^® Y\X§ fi^ 5 ~x 

~Z Z ^H' ~z cos(29)Z + i sm(26)X 1 Z 3 Z 4 X e ^ cos(26»)Z + sm(20)F = Z exp(-2i0X). (8.6) 

which also satisfies the error detection (but not correction) condition for single-qubit errors, in that no single-qubit 
error becomes part of the transformed stabilizer. 

Let us now consider the general stabilizer case. Recall once more the standard form of the normalizer, 



Eqs. (5.1),( p.2| ). Our gate construction acts by transforming one of the normalizer elements to two-body form, 
where it is applied as the central #-gate, and then is transformed back to its standard form. All other normalizer 
elements are left unchanged until the application of the central gate, with which they anticommute. At this point 
each Z [X] is multiplied by exp(— 2i6X) [exp(2i0Z)]. The final sequence of gates flips these normalizer ele ments back 



and forth between exp(— 2i9X) and exp(— 2i6Y) [exp(2i6*Z) and exp(2i9Y)] (recall the analysis in Section VB). All 
these operations have the effect of expanding, rather than shrinking the normalizer elements, as seen in the example 
of the 7-qubit code above. 

The ability to error-detect at each point thus translates to the question of whether any normalizer element ever 
becomes a single-body Hamiltonian under this sequence of transformations. It is not hard to see from the above 
description of the orbit of the normalizer that this can only be the case if in the standard form the normalizer contains 



a single-body element to begin with. This is certainly possible, as indeed shown in our Qix example (Section VC), 
where X = XIII. However, it is not the case for most interesting stabilizer codes, i.e., those offering protection 
against arbitrary single-qubit errors. Such codes must have "large" normalizer elements since they may not contain 
any single-qubit errors to begin with. We conclude that our SU(2) construction using just two-qubit Hamiltonians 
works for all stabilizer codes of interest, in the sense that it is fault-tolerant with respect to error detection. 



To complete the repertoir of universal operations the CNOT gate is still needed. The discussion given in Section VI 
applies here as well, with the modification that for non-CSS stabilizer codes it is once again necessary to apply two- 
body central gates. Fault tolerant measurement of the error syndrome can be done using the standard techniques 
available for stabilizer codes [Fi4|. 



IX. SUMMARY AND CONCLUSIONS 



In a previous paper |2!| we derived conditions for the existence of class of decoherence-free subspaces (DFSs) defined 
by having Abelian stabilizers over the Pauli group. In this sequel paper we addressed the problem of universal, fault- 
tolerant quantum computation on this class of DFSs. The errors in this model are the elements of the stabilizer, and 
thus are necessarily correlated. This model is complementary to the standard model of quantum computation using 
stabilizer quantum error correcting codes (QECCs), where the errors that are correctable by the code anticommute 
with the stabilizer (rather than being part of it). The correlation between errors in the present model implies no 
spatial symmetry in the system-bath interaction, unlike in most previous studies of computation on DFSs (which 
considered the "collective decoherence" model, and where the stabilizer is non- Abelian). Therefore our present results 
significantly enlarge the scope of the theory of DFSs. 

It turns out that even though the class of DFSs we considered are Pauli-group stabilizer codes, the usual universality 
constructions do not apply, because of the different error-model we assume. Our alternative construction of a set of 
universal quantum gates resorts to the early ideas about universal quantum computation, except that our operations 
all act on encoded (DFS) qubits: we showed how to implement arbitrary single-encoded-qubit operations [the SU (2) 
group] and CNOT gates between pairs of encoded qubits. The challenge here was to show how to accomplish 
this implementation using only physically reasonable Hamiltonians, i.e., those involving no more than two-body 
interactions. To do so, we switched from the usual point of view treating the normalizer elements (i.e., the operations 
that preserve the DFS) as gates, to one where these elements are considered as many-body Hamiltonians. We then 
introduced a procedure whereby these Hamiltonians could be simulated using at most two-body interactions. The 
gate sequence implementing this simulation does not preserve the DFS except at the beginning and end. Throughout 
the execution of the gates the DFS states are exposed to the stabilizer-errors. However, we showed that in fact the 
DFS is transformed into a sequence of stabilizer codes, each of which is capable of detecting and correcting the original 
stabilizer-errors. Moreover, we showed that these errors can be diagnosed in a fault-tolerant manner, i.e., without 
introducing new errors as a result of the associated measurements. In all, we showed how by using this type of hybrid 
DFS-QECC approach, universal, fault-tolerant quantum computation can be implemented. 

Our results have implications beyond computation on DFSs. We briefly considered here also the question of whether 
our techniques can be used to compute fault-tolerantly in the standard stabilizer error-model. We found the answer 
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to be affirmative for the purpose of single-qubit error detection, but not correction. While this is interesting in its 
own right because of the new universality construction we introduced, it may also have important implications for the 
question of quantum computation using concatenated codes. The reason is that our construction is highly paralleliz- 
able, meaning that it requires a very small number of operations during which the encoded information is exposed to 
errors. We speculate that this can significantly reduce the threshold for fault-tolerant quantum computation. 

Finally, an interesting open question is whether the methods developed here are applicable to the problem of 
universal quantum computation on other classes of DFSs. 
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APPENDIX A: WHY THE 4-BLOCK IMPLEMENTATION OF CNOT IS NOT FAULT-TOLERANT FOR 

NON-CSS STABILIZERS 



The construction of the CNOT in Ref. |3J| uses a series of bitwise CNOT's (along with some other operations) 
acting between pairs of qubits in 4 different blocks. Let us calculate the result of applying bitwise CNOT's on I® K ®X 
(i.e., on two out of the four blocks). Recall that for a non-CSS code X — X ® Nz ® Mx [Eq. (|5.2|)]. Therefore it 



follows from Eq. (6.3) that 

I 9K ®X\ — ► [i^Nz®^- 1 - 1 "} ®X, (Al) 

i.e., the Z's are copied backwards into the first block. Therefore the normalizer on the first block now contains 
I ® Nz ® I® K ~ l ~ T ■ This element obviously commutes with both the original X and Z [Eq. (5.1)], but does not equal 



either. Therefore it must be in the original stabilizer Q. Turning this around, we see that an error e S Q has become 
part of the new normalizer Nj(Qj)/Qj which is catastrophic since this error is now undetectable. 
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FIG. 1. Fault-tolerant circuit implementing exp(idZ) for the Q2X subgroup. The transformed Z is shown at each gate, and 
directly below the original normalizer element that it anticommutes with. 



FIG. 2. Parallel implementation of 9Z for the Q2X subgroup. 



FIG. 3. Fault-tolerant implementation of oxp(i9ZX) needed to generate CNOT. 



FIG. 4. Measurement of the stabilizer element XZYX. 
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Figure 1, Lidar et al., Decoherence-Free Subspaces for Multiple Qubit Errors (II) 
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Figure 3, Lidar et al., Decoherence-Free Subspaces for Multiple Qubit Errors (II) 
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Figure 4, Lidar et al., Decoherence-Free Subspaces for Multiple Qubit Errors (II) 
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